gautamkrishnar/refined-github-feeds 软件分析报告

基础信息

项目名称:gautamkrishnar/refined-github-feeds

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1718038930024693760/1718038930062442496

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
global-parent 拒绝服务 MPS-2021-26221 CVE-2021-35065 中危
minimist 安全漏洞 原型污染 MPS-2021-38405 CVE-2021-44906 严重
terser 安全漏洞 ReDoS MPS-2022-5145 CVE-2022-25858 高危
node-semver 安全漏洞 ReDoS MPS-2022-5166 CVE-2022-25883 高危
loader-utils 安全漏洞 不正确的正则表达式 MPS-2022-53512 CVE-2022-37599 高危
loader-utils 安全漏洞 不正确的正则表达式 MPS-2022-53516 CVE-2022-37603 高危
minimatch 资源管理错误漏洞 拒绝服务 MPS-2022-59845 CVE-2022-3517 高危
Tauri 原型污染漏洞 原型污染 MPS-2022-65568 CVE-2022-46175 高危
formula 安全漏洞 ReDoS MPS-2023-3782 CVE-2023-25166 中危
Webpack 安全漏洞 MPS-2023-7721 CVE-2023-28154 严重
Babel 插件任意代码执行漏洞漏洞【Poc公开】 不完整的黑名单 MPS-avb9-j50z CVE-2023-45133 严重

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
@babel/traverse 7.14.7 7.23.2 间接依赖 建议修复
json5 2.2.0 2.2.2 间接依赖 建议修复
minimatch 3.0.4 3.0.5 间接依赖 建议修复
terser 5.7.0 5.14.2 间接依赖 建议修复
minimist 1.2.5 1.2.6 间接依赖 建议修复
loader-utils 1.4.0 1.4.2 间接依赖 建议修复
webpack 5.40.0 5.76.0 间接依赖 建议修复
@sideway/formula 3.0.0 3.0.1 间接依赖 可选修复
semver 6.3.0 7.5.2 间接依赖 可选修复
glob-parent 6.0.0 6.0.1 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
BSD-2-Clause 8
MIT 272
BSD-3-Clause 9
ISC 13
Apache-2.0 2
MPL-2.0 1
CC-BY-4.0 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
glob-to-regexp 0.4.1 间接依赖 npm
pkg-dir 4.2.0 间接依赖 npm
find-cache-dir 3.3.1 间接依赖 npm
@babel/plugin-syntax-jsx 7.14.5 间接依赖 npm
@babel/plugin-transform-arrow-functions 7.14.5 间接依赖 npm
balanced-match 1.0.2 间接依赖 npm
@hapi/hoek 9.2.0 间接依赖 npm
@babel/preset-react 7.14.5 间接依赖 npm
@babel/plugin-transform-property-literals 7.14.5 间接依赖 npm
consola 2.15.3 间接依赖 npm
object-assign 4.1.1 间接依赖 npm
@babel/plugin-transform-modules-systemjs 7.14.5 间接依赖 npm
del 4.1.1 间接依赖 npm
@babel/plugin-transform-literals 7.14.5 间接依赖 npm
jsesc 2.5.2 间接依赖 npm
is-path-inside 2.1.0 间接依赖 npm
@babel/helper-member-expression-to-functions 7.14.7 间接依赖 npm
ci-info 3.2.0 间接依赖 npm
fast-deep-equal 3.1.3 间接依赖 npm
webpack 5.40.0 间接依赖 npm
@sideway/formula 3.0.0 间接依赖 npm
braces 3.0.2 间接依赖 npm
@babel/plugin-proposal-numeric-separator 7.14.5 间接依赖 npm
@webassemblyjs/wasm-gen 1.11.0 间接依赖 npm
@babel/plugin-proposal-optional-chaining 7.14.5 间接依赖 npm
@babel/plugin-transform-new-target 7.14.5 间接依赖 npm
@babel/plugin-transform-modules-umd 7.14.5 间接依赖 npm
loader-utils 1.4.0 间接依赖 npm
regexpu-core 4.7.1 间接依赖 npm
@babel/plugin-transform-spread 7.14.6 间接依赖 npm
@babel/helper-annotate-as-pure 7.14.5 间接依赖 npm
@webassemblyjs/ast 1.11.0 间接依赖 npm
ms 2.1.2 间接依赖 npm
babel-loader 8.2.2 间接依赖 npm
unicode-match-property-ecmascript 1.0.4 间接依赖 npm
@babel/helper-optimise-call-expression 7.14.5 间接依赖 npm
@babel/helper-create-regexp-features-plugin 7.14.5 间接依赖 npm
json-schema-traverse 0.4.1 间接依赖 npm
ansi-regex 5.0.0 间接依赖 npm
pify 4.0.1 间接依赖 npm
slash 3.0.0 直接依赖 npm
zip-webpack-plugin 4.0.1 间接依赖 npm
graceful-fs 4.2.6 间接依赖 npm
glob-parent 6.0.0 间接依赖 npm
wrappy 1.0.2 间接依赖 npm
@sideway/pinpoint 2.0.0 间接依赖 npm
string-width 4.2.2 间接依赖 npm
color-convert 1.9.3 间接依赖 npm
object-keys 1.1.1 间接依赖 npm
@babel/plugin-proposal-dynamic-import 7.14.5 间接依赖 npm
terser 5.7.0 间接依赖 npm
@babel/runtime 7.14.6 间接依赖 npm
@babel/plugin-proposal-json-strings 7.14.5 间接依赖 npm
@babel/traverse 7.14.7 间接依赖 npm
@babel/plugin-syntax-nullish-coalescing-operator 7.8.3 间接依赖 npm
@babel/plugin-transform-modules-commonjs 7.14.5 间接依赖 npm
chalk 2.4.2 间接依赖 npm
@babel/plugin-proposal-nullish-coalescing-operator 7.14.5 间接依赖 npm
uri-js 4.4.1 间接依赖 npm
clean-webpack-plugin 4.0.0-alpha.0 间接依赖 npm
regjsgen 0.5.2 间接依赖 npm
electron-to-chromium 1.3.758 间接依赖 npm
is-extglob 2.1.1 间接依赖 npm
source-map 0.5.7 间接依赖 npm
regenerate-unicode-properties 8.2.0 间接依赖 npm
to-fast-properties 2.0.0 间接依赖 npm
watchpack 2.2.0 间接依赖 npm
@babel/preset-env 7.14.7 间接依赖 npm
@webassemblyjs/helper-wasm-section 1.11.0 间接依赖 npm
escape-string-regexp 1.0.5 间接依赖 npm
@babel/compat-data 7.14.7 间接依赖 npm
wrap-ansi 7.0.0 间接依赖 npm
path-exists 4.0.0 间接依赖 npm
webpack-webextension-plugin 0.3.0 间接依赖 npm
@babel/types 7.14.5 间接依赖 npm
lodash.debounce 4.0.8 间接依赖 npm
copy-webpack-plugin 9.0.0 间接依赖 npm
@babel/plugin-transform-duplicate-keys 7.14.5 间接依赖 npm
source-map-support 0.5.19 间接依赖 npm
call-bind 1.0.2 间接依赖 npm
@babel/code-frame 7.14.5 间接依赖 npm
@babel/plugin-transform-reserved-words 7.14.5 间接依赖 npm
@babel/plugin-transform-react-display-name 7.14.5 间接依赖 npm
inherits 2.0.4 间接依赖 npm
@babel/plugin-transform-parameters 7.14.5 间接依赖 npm
source-list-map 2.0.1 间接依赖 npm
events 3.3.0 间接依赖 npm
has-symbols 1.0.2 间接依赖 npm
picomatch 2.3.0 间接依赖 npm
jest-worker 27.0.2 间接依赖 npm
resolve 1.20.0 间接依赖 npm
@babel/helper-explode-assignable-expression 7.14.5 间接依赖 npm
rimraf 2.7.1 间接依赖 npm
@babel/plugin-syntax-export-namespace-from 7.8.3 间接依赖 npm
@babel/plugin-syntax-private-property-in-object 7.14.5 间接依赖 npm
@babel/helper-module-transforms 7.14.5 间接依赖 npm
has-flag 3.0.0 间接依赖 npm
@babel/plugin-transform-classes 7.14.5 间接依赖 npm
@webassemblyjs/wasm-edit 1.11.0 间接依赖 npm
glob 7.1.7 间接依赖 npm
terser-webpack-plugin 5.1.4 间接依赖 npm
path-is-absolute 1.0.1 间接依赖 npm
@babel/plugin-transform-function-name 7.14.5 间接依赖 npm
is-fullwidth-code-point 3.0.0 间接依赖 npm
@babel/plugin-syntax-json-strings 7.8.3 间接依赖 npm
@babel/plugin-transform-block-scoping 7.14.5 间接依赖 npm
merge2 1.4.1 间接依赖 npm
mime-db 1.48.0 间接依赖 npm
@hapi/topo 5.0.0 间接依赖 npm
@babel/plugin-transform-shorthand-properties 7.14.5 间接依赖 npm
merge-stream 2.0.0 间接依赖 npm
@webassemblyjs/leb128 1.11.0 间接依赖 npm
emojis-list 3.0.0 间接依赖 npm
estraverse 4.3.0 间接依赖 npm
big.js 5.2.2 间接依赖 npm
@babel/plugin-proposal-class-static-block 7.14.5 间接依赖 npm
regenerator-transform 0.14.5 间接依赖 npm
@babel/plugin-proposal-optional-catch-binding 7.14.5 间接依赖 npm
ws 7.4.6 间接依赖 npm
@babel/plugin-transform-unicode-regex 7.14.5 间接依赖 npm
webextension-toolbox 4.0.1 直接依赖 npm
@babel/plugin-proposal-unicode-property-regex 7.14.5 间接依赖 npm
babel-plugin-polyfill-corejs3 0.2.3 间接依赖 npm
glob-base 0.3.0 间接依赖 npm
@babel/highlight 7.14.5 间接依赖 npm
regenerate 1.4.2 间接依赖 npm
@types/json-schema 7.0.7 间接依赖 npm
@babel/helper-simple-access 7.14.5 间接依赖 npm
@babel/polyfill 7.12.1 间接依赖 npm
@babel/helper-module-imports 7.14.5 间接依赖 npm
@nodelib/fs.stat 2.0.5 间接依赖 npm
@webassemblyjs/wasm-parser 1.11.0 间接依赖 npm
@babel/helper-remap-async-to-generator 7.14.5 间接依赖 npm
eslint-scope 5.1.1 间接依赖 npm
std-env 2.3.0 间接依赖 npm
once 1.4.0 间接依赖 npm
webextension-polyfill 0.8.0 间接依赖 npm
@babel/plugin-proposal-class-properties 7.14.5 间接依赖 npm
@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining 7.14.5 间接依赖 npm
core-js 3.15.0 间接依赖 npm
@babel/plugin-proposal-export-namespace-from 7.14.5 间接依赖 npm
@babel/plugin-transform-react-jsx-development 7.14.5 间接依赖 npm
p-map 2.1.0 间接依赖 npm
@webassemblyjs/helper-buffer 1.11.0 间接依赖 npm
@babel/plugin-transform-destructuring 7.14.7 间接依赖 npm
@types/eslint-scope 3.7.0 间接依赖 npm
core-js-compat 3.15.1 间接依赖 npm
@babel/plugin-transform-for-of 7.14.5 间接依赖 npm
@babel/helper-split-export-declaration 7.14.5 间接依赖 npm
randombytes 2.1.0 间接依赖 npm
@babel/helper-function-name 7.14.5 间接依赖 npm
fs.realpath 1.0.0 间接依赖 npm
@babel/plugin-transform-block-scoped-functions 7.14.5 间接依赖 npm
@babel/helper-create-class-features-plugin 7.14.6 间接依赖 npm
string-replace-loader 3.0.2 间接依赖 npm
@babel/helper-define-polyfill-provider 0.2.3 间接依赖 npm
@babel/plugin-transform-member-expression-literals 7.14.5 间接依赖 npm
inflight 1.0.6 间接依赖 npm
esutils 2.0.3 间接依赖 npm
@babel/helpers 7.14.6 间接依赖 npm
babel-plugin-polyfill-regenerator 0.2.2 间接依赖 npm
p-limit 2.3.0 间接依赖 npm
@sideway/address 4.1.2 间接依赖 npm
neo-async 2.6.2 间接依赖 npm
@webassemblyjs/wast-printer 1.11.0 间接依赖 npm
safe-buffer 5.1.2 间接依赖 npm
@babel/plugin-syntax-top-level-await 7.14.5 间接依赖 npm
@babel/plugin-syntax-async-generators 7.8.4 间接依赖 npm
@xtuc/ieee754 1.2.0 间接依赖 npm
@babel/plugin-syntax-object-rest-spread 7.8.3 间接依赖 npm
node-releases 1.1.73 间接依赖 npm
@babel/plugin-transform-template-literals 7.14.5 间接依赖 npm
webpack-watched-glob-entries-plugin 2.1.9 间接依赖 npm
js-tokens 4.0.0 间接依赖 npm
@babel/preset-modules 0.1.4 间接依赖 npm
reusify 1.0.4 间接依赖 npm
@nodelib/fs.walk 1.2.7 间接依赖 npm
@babel/helper-plugin-utils 7.14.5 间接依赖 npm
@babel/plugin-transform-unicode-escapes 7.14.5 间接依赖 npm
@types/glob 7.1.3 间接依赖 npm
gensync 1.0.0-beta.2 间接依赖 npm
object.assign 4.1.2 间接依赖 npm
babel-plugin-dynamic-import-node 2.3.3 间接依赖 npm
babel-plugin-polyfill-corejs2 0.2.2 间接依赖 npm
array-uniq 1.0.3 间接依赖 npm
path-parse 1.0.7 间接依赖 npm
@babel/plugin-syntax-numeric-separator 7.10.4 间接依赖 npm
strip-ansi 6.0.0 间接依赖 npm
@babel/plugin-proposal-private-methods 7.14.5 间接依赖 npm
@webassemblyjs/utf8 1.11.0 间接依赖 npm
@webassemblyjs/helper-numbers 1.11.0 间接依赖 npm
@xtuc/long 4.2.2 间接依赖 npm
@babel/plugin-proposal-object-rest-spread 7.14.7 间接依赖 npm
enhanced-resolve 5.8.2 间接依赖 npm
@babel/helper-replace-supers 7.14.5 间接依赖 npm
ansi-escapes 4.3.2 间接依赖 npm
@babel/plugin-proposal-async-generator-functions 7.14.7 间接依赖 npm
@babel/plugin-transform-runtime 7.14.5 间接依赖 npm
regjsparser 0.6.9 间接依赖 npm
commander 8.0.0-2 间接依赖 npm
@babel/plugin-syntax-dynamic-import 7.8.3 间接依赖 npm
minimatch 3.0.4 间接依赖 npm
@babel/plugin-transform-react-pure-annotations 7.14.5 间接依赖 npm
@webassemblyjs/helper-wasm-bytecode 1.11.0 间接依赖 npm
make-dir 3.1.0 间接依赖 npm
color-name 1.1.3 间接依赖 npm
case-sensitive-paths-webpack-plugin 2.4.0 间接依赖 npm
@babel/helper-compilation-targets 7.14.5 间接依赖 npm
@babel/plugin-transform-modules-amd 7.14.5 间接依赖 npm
micromatch 4.0.4 间接依赖 npm
chrome-trace-event 1.0.3 间接依赖 npm
@nodelib/fs.scandir 2.1.5 间接依赖 npm
text-table 0.2.0 间接依赖 npm
@babel/plugin-proposal-logical-assignment-operators 7.14.5 间接依赖 npm
@babel/generator 7.14.5 间接依赖 npm
@babel/plugin-proposal-private-property-in-object 7.14.5 间接依赖 npm
@types/node 15.12.4 间接依赖 npm
pinkie 2.0.4 间接依赖 npm
figures 3.2.0 间接依赖 npm
tapable 2.2.0 间接依赖 npm
pretty-time 1.1.0 间接依赖 npm
globby 6.1.0 间接依赖 npm
@webassemblyjs/ieee754 1.11.0 间接依赖 npm
json5 2.2.0 间接依赖 npm
mime-types 2.1.31 间接依赖 npm
normalize-path 3.0.0 间接依赖 npm
@babel/plugin-transform-react-jsx 7.14.5 间接依赖 npm
@babel/helper-wrap-function 7.14.5 间接依赖 npm
@babel/helper-builder-binary-assignment-operator-visitor 7.14.5 间接依赖 npm
run-parallel 1.2.0 间接依赖 npm
@babel/plugin-syntax-optional-chaining 7.8.3 间接依赖 npm
@babel/plugin-transform-named-capturing-groups-regex 7.14.7 间接依赖 npm
acorn 8.4.1 间接依赖 npm
@babel/plugin-transform-object-super 7.14.5 间接依赖 npm
brace-expansion 1.1.11 间接依赖 npm
@types/estree 0.0.47 间接依赖 npm
@babel/helper-validator-identifier 7.14.5 间接依赖 npm
locate-path 5.0.0 间接依赖 npm
@types/minimatch 3.0.4 间接依赖 npm
dir-glob 3.0.1 直接依赖 npm
semver 6.3.0 间接依赖 npm
fast-glob 3.2.5 间接依赖 npm
@babel/plugin-transform-computed-properties 7.14.5 间接依赖 npm
joi 17.3.0 间接依赖 npm
is-core-module 2.4.0 间接依赖 npm
is-path-in-cwd 2.1.0 间接依赖 npm
@babel/plugin-transform-regenerator 7.14.5 间接依赖 npm
unicode-match-property-value-ecmascript 1.2.0 间接依赖 npm
fastq 1.11.0 间接依赖 npm
convert-source-map 1.8.0 间接依赖 npm
ignore 5.1.8 直接依赖 npm
browserslist 4.16.6 间接依赖 npm
@babel/plugin-syntax-logical-assignment-operators 7.10.4 间接依赖 npm
ajv 6.12.6 间接依赖 npm
emoji-regex 8.0.0 间接依赖 npm
babel-plugin-transform-react-remove-prop-types 0.4.24 间接依赖 npm
@babel/plugin-transform-sticky-regex 7.14.5 间接依赖 npm
@webassemblyjs/helper-api-error 1.11.0 间接依赖 npm
buffer-from 1.1.1 间接依赖 npm
fast-json-stable-stringify 2.1.0 间接依赖 npm
buffer-crc32 0.2.13 间接依赖 npm
@babel/helper-validator-option 7.14.5 间接依赖 npm
@babel/plugin-transform-dotall-regex 7.14.5 间接依赖 npm
yocto-queue 0.1.0 直接依赖 npm
p-try 2.2.0 间接依赖 npm
array-union 1.0.2 间接依赖 npm
ansi-styles 3.2.1 间接依赖 npm
@webassemblyjs/wasm-opt 1.11.0 间接依赖 npm
@webassemblyjs/floating-point-hex-parser 1.11.0 间接依赖 npm
es-module-lexer 0.6.0 间接依赖 npm
json-parse-better-errors 1.0.2 间接依赖 npm
@babel/template 7.14.5 间接依赖 npm
regenerator-runtime 0.13.7 间接依赖 npm
schema-utils 2.7.1 间接依赖 npm
@babel/parser 7.14.7 间接依赖 npm
@babel/helper-get-function-arity 7.14.5 间接依赖 npm
punycode 2.1.1 间接依赖 npm
supports-color 5.5.0 间接依赖 npm
commondir 1.0.1 间接依赖 npm
colorette 1.2.2 间接依赖 npm
define-properties 1.1.3 间接依赖 npm
concat-map 0.0.1 间接依赖 npm
debug 4.3.1 间接依赖 npm
type-fest 0.21.3 间接依赖 npm
minimist 1.2.5 间接依赖 npm
pinkie-promise 2.0.1 间接依赖 npm
escalade 3.1.1 间接依赖 npm
is-glob 4.0.1 间接依赖 npm
webpackbar 5.0.0-3 间接依赖 npm
@babel/plugin-transform-exponentiation-operator 7.14.5 间接依赖 npm
@babel/plugin-transform-async-to-generator 7.14.5 间接依赖 npm
@babel/plugin-syntax-class-static-block 7.14.5 间接依赖 npm
find-up 5.0.0 间接依赖 npm
loader-runner 4.2.0 间接依赖 npm
@babel/core 7.14.6 间接依赖 npm
@babel/plugin-syntax-optional-catch-binding 7.8.3 间接依赖 npm
caniuse-lite 1.0.30001239 间接依赖 npm
p-locate 4.1.0 间接依赖 npm
@types/eslint 7.2.13 间接依赖 npm
webpack-sources 2.3.0 间接依赖 npm
@babel/plugin-transform-typeof-symbol 7.14.5 间接依赖 npm
yazl 2.5.1 间接依赖 npm
@babel/plugin-syntax-class-properties 7.12.13 间接依赖 npm
@babel/helper-skip-transparent-expression-wrappers 7.14.5 间接依赖 npm
globals 11.12.0 间接依赖 npm
path-is-inside 1.0.2 间接依赖 npm
is-path-cwd 2.2.0 间接依赖 npm
fill-range 7.0.1 间接依赖 npm
path-type 4.0.0 间接依赖 npm
serialize-javascript 5.0.1 间接依赖 npm
@babel/helper-hoist-variables 7.14.5 间接依赖 npm
esrecurse 4.3.0 间接依赖 npm
ajv-keywords 3.5.2 间接依赖 npm
(0)
上一篇 2023年10月28日
下一篇 2023年10月28日

相关推荐

  • jsonzou/jmockdata 软件分析报告

    基础信息 项目名称:jsonzou/jmockdata 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719299859928449024/1719299860964442112 此报告由Murphysec提供 …

    软件分析 2023年10月31日
    0
  • akamud/vscode-theme-onelight 软件分析报告

    基础信息 项目名称:akamud/vscode-theme-onelight 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1715595310478786560/1715595310516535296 此报告由M…

    软件分析 2023年10月23日
    0
  • ggeop/Python-ai-assistant 软件分析报告

    基础信息 项目名称:ggeop/Python-ai-assistant 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721221753140674560/1728182021345730560 此报告由Murp…

    软件分析 2023年11月25日
    0
  • wix/react-native-ui-lib 软件分析报告

    基础信息 项目名称:wix/react-native-ui-lib 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719758340036886528/1719758340145938432 此报告由Murphy…

    软件分析 2023年11月2日
    0
  • acoomans/ACKeyboard 软件分析报告

    基础信息 项目名称:acoomans/ACKeyboard 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1715510853193302016/1715510853306548224 此报告由Murphysec提…

    软件分析 2023年10月23日
    0